Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/UBBNET/du18SQ0OcUHarCF8uWya8GPtxmY.roa
File: du18SQ0OcUHarCF8uWya8GPtxmY.roa (raw, json)
Hash identifier: 4+WgpYhsJcV2AjkEDYBC5pUh4ldqRO7xn5TXgvf6sOw=
Subject key identifier: 76:ED:7C:49:0D:0E:71:41:DA:AC:21:7C:B9:6C:9A:F0:63:ED:C6:66
Certificate issuer: /CN=08469E113701815993013E13E548A2B340E44E0A
Certificate serial: 12E3
Authority key identifier: 08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/du18SQ0OcUHarCF8uWya8GPtxmY.roa
Signing time: Wed 29 Sep 2021 02:55:07 +0000
ROA not before: Wed 29 Sep 2021 02:55:07 +0000
ROA not after: Thu 29 Sep 2022 02:36:22 +0000
asID: 24164
IP address blocks: 180.218.64.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4835 (0x12e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08469E113701815993013E13E548A2B340E44E0A
Validity
Not Before: Sep 29 02:55:07 2021 GMT
Not After : Sep 29 02:36:22 2022 GMT
Subject: CN=76ED7C490D0E7141DAAC217CB96C9AF063EDC666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:a3:a2:3e:9d:25:39:4b:67:2c:e3:0d:e5:
40:38:df:50:ed:00:ba:f9:8d:58:d9:57:cc:c7:d0:
46:aa:fc:be:0b:a7:8c:24:82:8e:7f:3d:2a:4e:a4:
da:0f:3a:9d:58:9f:2b:71:ed:ae:1a:80:f2:6a:9b:
d7:7a:30:ff:4f:66:51:ae:23:7e:1d:0c:37:88:fc:
7a:22:10:c6:1a:a7:49:66:37:93:21:8d:5b:89:80:
9d:48:7e:fe:b7:1b:92:7f:c1:92:b1:fc:98:84:81:
50:50:fc:61:5b:dd:a0:8b:c6:0d:70:00:dd:c8:6c:
83:35:78:31:f6:57:5d:3b:c9:20:0f:4e:b8:70:d2:
bc:33:ae:7b:cb:29:60:b2:82:37:22:2a:a5:3e:c9:
7c:4c:24:d4:32:60:72:d1:7d:70:e0:57:54:3e:d1:
18:00:65:b5:ce:f7:e9:21:fc:ae:c0:bd:a4:dc:d1:
e3:26:a4:f4:58:01:56:cb:67:73:1c:23:ff:2b:f9:
f9:6d:ce:14:a7:95:cd:73:97:56:d3:2e:34:34:91:
fa:9f:5b:32:da:d3:fe:ed:84:9d:94:4e:bf:37:65:
3b:16:e2:dc:73:45:b3:55:66:cd:09:3c:6c:68:82:
0c:ff:c4:0b:4c:68:da:24:49:7e:1a:0b:47:ef:de:
0a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:ED:7C:49:0D:0E:71:41:DA:AC:21:7C:B9:6C:9A:F0:63:ED:C6:66
X509v3 Authority Key Identifier:
keyid:08:46:9E:11:37:01:81:59:93:01:3E:13:E5:48:A2:B3:40:E4:4E:0A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/CEaeETcBgVmTAT4T5Uiis0DkTgo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CEaeETcBgVmTAT4T5Uiis0DkTgo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/UBBNET/du18SQ0OcUHarCF8uWya8GPtxmY.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
180.218.64.0/20
Signature Algorithm: sha256WithRSAEncryption
12:b2:96:85:5f:59:de:66:a1:9a:dd:c8:61:00:be:9a:18:b5:
1e:22:e9:2d:f0:8c:62:ab:37:7c:f9:b2:63:52:4a:fe:83:2b:
c3:11:0a:d5:65:b8:2e:b2:d7:48:9c:f3:b7:31:0a:60:3a:5a:
8e:3f:09:9a:9e:18:9e:96:92:3e:64:c6:0b:ce:85:aa:c2:e8:
c8:bd:59:d7:80:c1:16:78:fd:63:b9:31:6a:ef:cf:ef:3a:14:
05:47:15:bc:59:a5:9a:af:93:2e:b1:08:89:73:c2:3f:20:f8:
34:c1:f8:85:fc:71:11:31:42:11:d2:db:4d:b3:17:1e:c9:50:
ae:5e:6d:6f:b0:4f:3b:75:77:74:b1:a5:88:a5:94:63:88:f3:
55:53:d6:30:ac:4c:26:07:df:95:f6:37:d0:fd:ad:06:c5:90:
4b:47:47:f8:75:bf:7a:84:36:41:af:fe:9a:e3:52:ec:63:40:
e8:74:cb:48:23:34:ca:9d:e7:5a:59:37:fb:05:cf:aa:5d:85:
48:72:6e:d8:ee:2e:f8:05:d8:73:f6:e7:b9:66:6e:37:a6:f1:
f2:5e:c3:88:1d:9e:7b:5f:31:3e:82:6b:a9:ea:e9:38:b1:4a:
05:c9:93:fe:47:4f:5a:d7:a8:cd:66:cd:99:bf:ab:d4:cc:4e:
5e:2e:24:8f
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICEuMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDg0
NjlFMTEzNzAxODE1OTkzMDEzRTEzRTU0OEEyQjM0MEU0NEUwQTAeFw0yMTA5Mjkw
MjU1MDdaFw0yMjA5MjkwMjM2MjJaMDMxMTAvBgNVBAMTKDc2RUQ3QzQ5MEQwRTcx
NDFEQUFDMjE3Q0I5NkM5QUYwNjNFREM2NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChDaOiPp0lOUtnLOMN5UA431DtALr5jVjZV8zH0Eaq/L4Lp4wk
go5/PSpOpNoPOp1Ynytx7a4agPJqm9d6MP9PZlGuI34dDDeI/HoiEMYap0lmN5Mh
jVuJgJ1Ifv63G5J/wZKx/JiEgVBQ/GFb3aCLxg1wAN3IbIM1eDH2V107ySAPTrhw
0rwzrnvLKWCygjciKqU+yXxMJNQyYHLRfXDgV1Q+0RgAZbXO9+kh/K7AvaTc0eMm
pPRYAVbLZ3McI/8r+fltzhSnlc1zl1bTLjQ0kfqfWzLa0/7thJ2UTr83ZTsW4txz
RbNVZs0JPGxoggz/xAtMaNokSX4aC0fv3grNAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUdu18SQ0OcUHarCF8uWya8GPtxmYwHwYDVR0jBBgwFoAUCEaeETcBgVmTAT4T
5Uiis0DkTgowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVU
L0NFYWVFVGNCZ1ZtVEFUNFQ1VWlpczBEa1Rnby5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvQ0VhZUVUY0JnVm1UQVQ0VDVVaWlzMERrVGdvLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVUJCTkVUL2R1MThTUTBPY1VIYXJDRjh1
V3lhOEdQdHhtWS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAS0
2kAwDQYJKoZIhvcNAQELBQADggEBABKyloVfWd5moZrdyGEAvpoYtR4i6S3wjGKr
N3z5smNSSv6DK8MRCtVluC6y10ic87cxCmA6Wo4/CZqeGJ6Wkj5kxgvOharC6Mi9
WdeAwRZ4/WO5MWrvz+86FAVHFbxZpZqvky6xCIlzwj8g+DTB+IX8cRExQhHS202z
Fx7JUK5ebW+wTzt1d3SxpYillGOI81VT1jCsTCYH35X2N9D9rQbFkEtHR/h1v3qE
NkGv/prjUuxjQOh0y0gjNMqd51pZN/sFz6pdhUhybtjuLvgF2HP257lmbjem8fJe
w4gdnntfMT6Ca6nq6TixSgXJk/5HT1rXqM1mzZm/q9TMTl4uJI8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:05 2024 by rpki-client on console-fra.rpki-client.org